|
@@ -15,7 +15,7 @@ spec:
|
|
|
# credentials from the environment of the controller.
|
|
# credentials from the environment of the controller.
|
|
|
auth:
|
|
auth:
|
|
|
|
|
|
|
|
- # 1: static credentials
|
|
|
|
|
|
|
+ # static credentials:
|
|
|
# point to a secret that contains static credentials
|
|
# point to a secret that contains static credentials
|
|
|
# like AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY
|
|
# like AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY
|
|
|
secretRef:
|
|
secretRef:
|
|
@@ -26,13 +26,6 @@ spec:
|
|
|
name: "my-aws-creds"
|
|
name: "my-aws-creds"
|
|
|
key: "access-secret"
|
|
key: "access-secret"
|
|
|
|
|
|
|
|
- # option 2: IAM Roles for Service Accounts
|
|
|
|
|
- # point to a service account that should be used
|
|
|
|
|
- # that is configured for IAM Roles for Service Accounts (IRSA)
|
|
|
|
|
- jwt:
|
|
|
|
|
- serviceAccountRef:
|
|
|
|
|
- name: "oci-token-sync"
|
|
|
|
|
-
|
|
|
|
|
# optional request parameters for further fine-tuning the Token generation.
|
|
# optional request parameters for further fine-tuning the Token generation.
|
|
|
requestParameters:
|
|
requestParameters:
|
|
|
serialNumber: arn:aws:iam::123456789012:mfa/user
|
|
serialNumber: arn:aws:iam::123456789012:mfa/user
|
liununu